Project

General

Profile

1
<?php
2
/**
3
 *
4
 * @category        modules
5
 * @package         news
6
 * @author          WebsiteBaker Project
7
 * @copyright       2004-2009, Ryan Djurovich
8
 * @copyright       2009-2010, Website Baker Org. e.V.
9
 * @link			http://www.websitebaker2.org/
10
 * @license         http://www.gnu.org/licenses/gpl.html
11
 * @platform        WebsiteBaker 2.8.x
12
 * @requirements    PHP 4.3.4 and higher
13
 * @version         $Id: save_comment.php 1289 2010-02-10 15:13:21Z kweitzel $
14
 * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/trunk/wb/modules/news/save_comment.php $
15
 * @lastmodified    $Date: 2010-02-10 16:13:21 +0100 (Wed, 10 Feb 2010) $
16
 *
17
 */
18

    
19
require('../../config.php');
20

    
21
// Get id
22
if(!isset($_POST['comment_id']) OR !is_numeric($_POST['comment_id']) OR !isset($_POST['post_id']) OR !is_numeric($_POST['post_id']))
23
{
24

    
25
	header("Location: ".ADMIN_URL."/pages/index.php");
26
	exit( 0 );
27
}
28
else
29
{
30
	$comment_id = $_POST['comment_id'];
31
}
32

    
33
// Include WB admin wrapper script
34
$update_when_modified = true; // Tells script to update when this page was last updated
35
require(WB_PATH.'/modules/admin.php');
36

    
37
// Validate all fields
38
if($admin->get_post('title') == '' AND $admin->get_post('comment') == '')
39
{
40
	$admin->print_error($MESSAGE['GENERIC']['FILL_IN_ALL'], WB_URL.'/modules/news/modify_comment.php?page_id='.$page_id.'&section_id='.$section_id.'comment_id='.$id);
41
}
42
else
43
{
44
	$title = strip_tags($admin->get_post_escaped('title'));
45
	$comment = strip_tags($admin->get_post_escaped('comment'));
46
	$post_id = $admin->get_post('post_id');
47
}
48

    
49
// Update row
50
$database->query("UPDATE ".TABLE_PREFIX."mod_news_comments SET title = '$title', comment = '$comment' WHERE comment_id = '$comment_id'");
51

    
52
// Check if there is a db error, otherwise say successful
53
if($database->is_error())
54
{
55
	$admin->print_error($database->get_error(), WB_URL.'/modules/news/modify_comment.php?page_id='.$page_id.'&section_id='.$section_id.'&comment_id='.$id);
56
}
57
else
58
{
59
	$admin->print_success($TEXT['SUCCESS'], WB_URL.'/modules/news/modify_post.php?page_id='.$page_id.'&section_id='.$section_id.'&post_id='.$post_id);
60
}
61

    
62
// Print admin footer
63
$admin->print_footer();
64

    
65
?>
(23-23/31)